PCI DSS MCP
PCI DSS 4.0 MCP
涵盖所有 12 项 PCI DSS 4.0 要求的支付卡合规性评估,包括持卡人数据流分析和 SAQ 生成。
存在意义
PCI DSS 4.0 于 2024 年 3 月生效,包含 64 项新要求,其中许多要求将于 2025 年 3 月起强制执行。任何存储、处理或传输持卡人数据的组织都必须遵守该标准,而涉及支付流程(欺诈检测、交易评分、客户身份验证)的 AI 系统带来了新的范围界定挑战。
4.0 版本引入了针对性的风险分析、定制化方法验证,以及对脚本、标头和客户端保护的更严格要求。大多数由 QSA 主导的评估费用在 5 万至 20 万美元之间。此 MCP 可评估所有 12 项要求的合规性,分析持卡人数据流,验证网络分段,检查漏洞扫描状况,并生成相应的自我评估问卷 (SAQ)。
Related MCP server: ISO 27001 AI MCP
安装
pip install pci-dss-mcp工具
工具 | PCI DSS 参考 | 功能 |
| Req 1-12 | 针对所有 12 项 PCI DSS 4.0 要求的全面评估 |
| Req 3, 4 | 持卡人数据流分析和存储评估 |
| Req 1 | 验证网络分段和防火墙控制 |
| Req 5, 6, 11 | ASV 扫描合规性和漏洞管理状况 |
| SAQ A-D | 生成相应的自我评估问卷 (SAQ) |
示例
Prompt: "Assess PCI DSS 4.0 compliance for our e-commerce platform.
We use Stripe for payment processing but store the last 4 digits of card
numbers in our database for order history. We run an AI fraud detection
model that sees full transaction metadata."
Result: Assessment across all 12 requirements with findings: stored card
digits need Req 3 encryption validation, AI fraud model scoping under
Req 12.5.2 targeted risk analysis, client-side JavaScript needs Req 6.4.3
integrity controls. SAQ D-Merchant generated with gap remediation plan.定价
层级 | 价格 | 包含内容 |
免费版 | £0 | 每天 10 次调用 — 合规性评估 + SAQ 生成 |
专业版 | £199/月 | 无限制 + HMAC 签名证明 + 验证 URL |
企业版 | £1,499/月 | 多租户 + 联合品牌报告 + Webhook |
证明 API
每次专业版/企业版审计都会生成一份加密签名的证书:
POST https://meok-attestation-api.vercel.app/sign
GET https://meok-attestation-api.vercel.app/verify/{cert_id}零依赖验证器:pip install meok-attestation-verify
链接
网站:meok.ai
所有 MCP 服务器:meok.ai/labs/mcp/servers
企业支持:nicholas@csoai.org
许可证
MIT
Maintenance
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceNIST RMF AI - MCP server providing AI-powered tools and automation by MEOK AI Labs10MIT

ISO 27001 AI MCPofficial
AlicenseNot gradedqualityBmaintenanceISO 27001 AI - MCP server providing AI-powered tools and automation by MEOK AI Labs122MIT- AlicenseAqualityBmaintenanceISO 42001 AI - MCP server providing AI-powered tools and automation by MEOK AI Labs10101MIT

SOC2 Compliance AI MCPofficial
AlicenseAqualityBmaintenanceSOC2 Compliance AI - MCP server providing AI-powered tools and automation by MEOK AI Labs610MIT
Related MCP Connectors
Agent Commerce Payments MCP Server by MEOK AI Labs
MEOK MCP Hardening MCP — automated security red-team for any MCP server. Maps OWASP LLM Top 10
Hosted MCP for denial, prior auth, reimbursement, workflow validation, batch scoring, and feedback.
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/CSOAI-ORG/pci-dss-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server